A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 17.10- Ubuntu 16.04 LTS- Ubuntu 14.04 LTS

Summary:

MiniUPnP could be made to crash or run programs if it received speciallycrafted network traffic.

Software Description:- miniupnpc: UPnP IGD client lightweight library

Details:

It was discovered that MiniUPnP incorrectly handled memory. A remoteattacker could use this issue to cause a denial of service or possiblyexecute arbitrary code with privileges of the user running an applicationthat uses the MiniUPnP library.

Update instructions:

The problem can be corrected by updating your system to the followingpackage versions:

Ubuntu 17.10: libminiupnpc10 1.9.20140610-4ubuntu1.1

Ubuntu 16.04 LTS: libminiupnpc10 1.9.20140610-2ubuntu2.16.04.2

Ubuntu 14.04 LTS: libminiupnpc8 1.6-3ubuntu2.14.04.4

In general, a standard system update will make all the necessary changes.